scrapfly-browser

The skill’s core purpose and official Scrapfly data flow are coherent, but the optional BYOP connector materially expands risk. It instructs users to curl|sh a same-org but unverifiable binary and pass API-linked credentials through it, which triggers a high security-risk classification even without clear malicious intent.